I’m trying to integrate the simplest possible flow into our CRM. I want to update a Contact when a certain event happens in the system. Infusionsoft is making this so terribly difficult. Is it really that hard to support long-lived access or at-least refresh tokens in your OAuth implementation? It…

Good afternoon, @Igor_Rinkovec ! I’m going to refer back to an earlier post, as this question comes up occasionally: [image] REST API Connection [image] REST API Connection Is there really not just a simple way to connect to an account using a client ID and secret? I think there are two qu…

Hello @TomScott , my request however does not have anything against OAuth2. OAuth2 is awesome. What is not awesome is not having the ability to generate a long-lived refresh or access token. Imagine the scenario: I have an integration that does something with your API. To make that work I need to …

@TomScott , you and your team need to have a discussion to work out how to resolve these onging OAuth issues. You mention that the Legacy API Key has many failings. You do realize that your development team made the original API key mechanism and you can easily fix all those problems. As far as I …

@Igor_Rinkovec and @Pav , there is a lot of stuff in this post, and I will try and address most of it. I want to first say we are all on the same team. We understand some of the frustration. We are trying to address some of these issues, and some will not be addressed. No one on our team has claimed …

Hi @bradb , thanks in coming back with a more detailed response. As a developer who has been using the API for 8+ years you can see how from our point of view how awkward / messy / difficult the OAuth implementation has made things. I run all my API scripts using XML-RPC with the Legacy API Key, be…

I’d like to also chime in here to 100% echo @Pav ’s comments. One additional point, is that implementing 2-legged OAuth (instead of forcing 3-legged OAuth) would greatly alleviate the pains of working with the current implementation. Google firebase, for example, implements “service accounts” for ba…

Hi @bradb . It’s been over two years since you mentioned Personal Access Tokens. Do you have an update on this?

Brad responded in this thread and said it’s coming this quarter! [image] Public Wordpress Plugin: oAuth risks API Q&A We are going to be releasing 2 new authentication methods probably this quarter. Personal Access Tokens (PAT) and Service Access Tokens (SAT). These wil…

Long-lived token support

API Q&A

InfusedKim (Kim Streich) January 28, 2021, 4:31pm 9

Brad responded in this thread and said it’s coming this quarter!

Topic		Replies	Views
REST API Connection API Q&A	38	5891	September 24, 2018
Maintain valid API bearer token w/o involving humans? API Q&A oauth , rest , refresh_token , access-token	8	1315	October 28, 2020
Oauth2 Client Credentials Grant API Q&A oauth	8	1401	February 1, 2021
Invalid Refresh Token API Q&A auth	21	3737	April 10, 2021
Oath Token issue API Q&A api	3	809	May 7, 2019

Long-lived token support

Related topics